$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: TWIPptlP0W+i5NPrE85ylFbtlz5s0dtiSB/pTcl2P7k= Subject key identifier: F8:3F:00:4C:3F:98:A2:AC:D9:1C:20:D3:83:1E:7E:AF:5C:3B:4A:24 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 055CD38C8CAD6B601785161225A048445944A459 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: ED Signing time: Sun 19 Oct 2025 19:21:25 +0000 Manifest this update: Sun 19 Oct 2025 19:16:25 +0000 Manifest next update: Wed 22 Oct 2025 23:18:25 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: FlCadecDXyts4oEaJC6SAO8InZAENbWAyPbPCbx1Vaw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:d3:8c:8c:ad:6b:60:17:85:16:12:25:a0:48:44:59:44:a4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Oct 19 19:16:25 2025 GMT Not After : Oct 22 23:18:25 2025 GMT Subject: CN=F83F004C3F98A2ACD91C20D3831E7EAF5C3B4A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:78:85:16:ae:5b:65:46:60:d0:53:bd:f2: 69:07:e1:58:f1:0c:84:41:da:4f:19:bc:71:c0:2c: 59:95:6c:7e:12:2b:5f:74:90:fa:82:49:96:a4:bb: 92:c0:bf:e4:65:53:13:b3:24:0e:1e:c6:cc:7d:5d: 04:80:68:2f:31:f3:bf:32:94:aa:54:79:50:0a:e5: f2:69:32:d7:64:93:9b:b0:c7:e0:9a:03:67:64:35: 1f:a1:9f:c3:65:c8:13:24:9b:5b:16:17:54:8d:04: 6d:71:8e:5d:37:67:41:e9:95:21:bf:48:4a:bc:3b: cc:46:f9:24:b4:94:f8:91:50:02:ed:64:ad:ee:57: 47:4f:e1:eb:08:e9:2f:c2:1e:7b:8f:2b:6b:f7:49: 44:3c:b5:fa:8f:11:f9:45:59:e3:e6:cd:32:4c:fd: d3:76:e0:a2:9b:e5:f2:d1:d5:fc:76:2f:14:88:37: 0d:d4:87:28:1e:f7:6d:d4:32:3d:15:2e:9c:dc:ef: 3a:73:56:c0:37:6f:8b:be:4a:36:53:47:c6:bc:9e: 97:6e:fa:1b:5e:fb:80:25:9e:d7:2d:ca:5c:1a:95: cb:71:3c:08:a4:00:b1:c9:31:8c:88:b6:04:13:8c: 17:dc:30:31:45:75:ea:5a:a6:57:ee:b9:94:a2:3a: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3F:00:4C:3F:98:A2:AC:D9:1C:20:D3:83:1E:7E:AF:5C:3B:4A:24 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fb:eb:dc:84:97:61:32:63:94:87:69:ab:e2:4d:e9:8a:17: 05:4b:21:fb:c0:dc:ce:89:73:2b:b0:6b:f5:7d:99:12:6c:91: 2a:b1:64:c0:72:ba:e0:a6:77:af:db:f7:4e:8f:6e:e8:44:c2: 87:f8:ec:9a:73:cd:23:59:bd:d2:37:61:e5:27:5a:e9:86:5a: c9:63:90:7a:e3:3c:7c:8c:9e:3d:e6:25:12:08:9c:50:7a:bd: b2:8f:cb:f0:70:61:ed:e4:40:7a:47:b9:28:65:5e:8c:a7:61: c9:63:2e:a6:74:e0:16:63:64:2a:d1:2e:45:91:10:66:f0:86: 4d:44:bf:67:06:41:ef:e7:3f:23:89:ef:13:c4:dc:22:57:78: 46:6f:ba:14:d0:39:d4:23:97:02:22:66:86:b3:58:d3:da:7b: 8e:6e:19:cc:00:bf:48:6c:d7:28:20:4e:6b:01:c3:1d:f9:e2: 09:94:63:c5:7f:b0:09:f5:95:8a:ae:dd:9a:03:20:1f:c2:1e: 5d:94:c1:bb:d2:b6:fd:56:9a:be:8d:b0:71:48:a0:2c:d6:f5: f7:a0:cd:7d:d7:08:f6:d4:d9:fe:c5:db:ed:9e:0f:3e:ba:d7: f4:59:b5:c0:36:d9:c3:29:dd:13:0d:94:bd:9c:f6:a7:de:7f: 6c:7f:37:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVzTjIyta2AXhRYSJaBIRFlEpFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTEwMTkxOTE2MjVaFw0yNTEwMjIyMzE4MjVaMDMxMTAvBgNV BAMTKEY4M0YwMDRDM0Y5OEEyQUNEOTFDMjBEMzgzMUU3RUFGNUMzQjRBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIF3iFFq5bZUZg0FO98mkH4Vjx DIRB2k8ZvHHALFmVbH4SK190kPqCSZaku5LAv+RlUxOzJA4exsx9XQSAaC8x878y lKpUeVAK5fJpMtdkk5uwx+CaA2dkNR+hn8NlyBMkm1sWF1SNBG1xjl03Z0HplSG/ SEq8O8xG+SS0lPiRUALtZK3uV0dP4esI6S/CHnuPK2v3SUQ8tfqPEflFWePmzTJM /dN24KKb5fLR1fx2LxSINw3Uhyge923UMj0VLpzc7zpzVsA3b4u+SjZTR8a8npdu +hte+4AlntctylwalctxPAikALHJMYyItgQTjBfcMDFFdepaplfuuZSiOh+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+D8ATD+YoqzZHCDTgx5+r1w7SiQwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/769yEl2EyY5SHaaviTemKFwVLIfvA3M6J cyuwa/V9mRJskSqxZMByuuCmd6/b906PbuhEwof47JpzzSNZvdI3YeUnWumGWslj kHrjPHyMnj3mJRIInFB6vbKPy/BwYe3kQHpHuShlXoynYcljLqZ04BZjZCrRLkWR EGbwhk1Ev2cGQe/nPyOJ7xPE3CJXeEZvuhTQOdQjlwIiZoazWNPae45uGcwAv0hs 1yggTmsBwx354gmUY8V/sAn1lYqu3ZoDIB/CHl2UwbvStv1Wmr6NsHFIoCzW9feg zX3XCPbU2f7F2+2eDz661/RZtcA22cMp3RMNlL2c9qfef2x/Nyc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:17 2025 by rpki-client